[cifs-protocol] MS-DRSR Server Behavior of the IDL_DRSRemoveDsServer Method missing RODC KDC removal

Andrew Bartlett abartlet at samba.org
Mon Sep 21 04:05:47 UTC 2015

In "MS-DRSR Server Behavior of the IDL_DRSRemoveDsServer

This mentions how to remove the ridSetReferences, but not the RODC KDC
users created and linked via the msDS-KrbTgtLink value on the DC

Please correct, as my testing against Windows 2008R2 shows that these
are removed by this call. 

While you are checking, can you confirm if any other details are
removed server-side that are not currently documented?


Andrew Bartlett
Andrew Bartlett
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   

More information about the cifs-protocol mailing list